import "math"

private rule whitelist
{
    meta:
        description = "whitelist"
    condition:
	        math.tlsh(0, filesize,100,"6F164A85BC8DFCFD7C79837BB37BEF90160E6530C4F5E834269AA66066A9014C9167E24173F8461EF1FF0B78A93904255BBBF9566732D74E1898A0AE0AA3B40CD51733")>0 or
	        math.tlsh(0, filesize,100,"CA2274D4AE63EEC666D65FDAFF0DA31C88060200C4DD487F56134103F862581AB52DF65A79EA2D7127D360EE4B4B50005730E65B8358A8DBB95E03F8AFA1768C7D2BEE")>0 or
	        math.tlsh(0, filesize,100,"1051428C0186B8E214A01F3D25157E9D0865D4D0B870AE53EE8761CB2B503EE533FE5ED9B499EAA86B62B0B29C34AC4D363CDC02B1F8C678578CB04D38BA8144A829CD")>0 or
	        math.tlsh(0, filesize,100,"7943F8E9EB69EA65E7CC487D63EF3C0EFA0213ED7EE50BB31323C6533A6669A777F99D51740FB1ADC293533163BD9905EDBEC4314740F078F5A408A052A895982128C8")>0 or
	        math.tlsh(0, filesize,100,"DA739533ACBC57E6C73C8879B2E670B8AA1BE741DC97CD1B7BD5C0DAD67B074375EDC6C1D78CA02A022741A82ADEB49A957C003250559EE6FE467F6C28409FD40289F6")>0
}